CORS OAM Apache HTTP server issue

Hi,

We are facing CORS issue with the following environment:

OAM 11g R2 PS2

Webgate 11g - Apache http server 2.2.15

Few Details:

1. A single page application url and Service URLs are protected using OAM.

2. SPA has few links (Service URLS) that make AJAX call to webservices.

3. UI and Service URLs are different

     e.g. UI: abc.com

            Service: mno.com

4. When user logs in and clicks on any of the links, user does not receive any response. (If service domain is not protected, response is shown)

Get the following error:

No 'Access-Control-Allow-Origin' header is present on the requested resource. Origin 'mno.com' is therefore not allowed access.